OESISOK™ Hard Disk Encryption Criteria - Version 1.1

OESISOK™ Hard Disk Encryption designation is available for hard disk encryption applications. Applications submitted for certification must meet the following criteria before they are designated OESISOK.

Installation Test

A submitted application is installed on all supported operating systems. In order to complete this test, it must clear all of the following checks:

• The application installer completes without errors on all supported operating system and language combinations reflected in application documentation.

Rogue Application Test

A submitted application is checked against known lists of rogue applications. In order to complete this test, it must clear all of the following checks:

• Application or its vendor is not listed as ”rogue” according to the OPSWAT internal database.
• Application installer and binaries are scanned against multiple anti-malware engines listed below. None of the following engines should report any application file as “suspicious”, “threat” or other nomenclature indicative of the submitted application being rogue.

  • Spybot Search & Destroy 1.5
  • Lavasoft Ad-Aware 2007 Free Edition
  • Symantec Antivirus
  • McAfee VirusScan
  • CA eTrust™
  • Norman Virus Control
  • ESET NOD32 Antivirus Engine
  • VirusBuster EDK
  • Microworld eScan Engine
  • Kaspersky Anti-Virus®
  • ClamAV

OESIS® Local Detection Test

A submitted application is checked to ensure it will be detected by the OESIS Framework.

Appendix - Verification Testing

When an application is submitted for the OESISOK Hard Disk Encryption designation, the following tests will be performed for statistical data analysis:

Encryption / Decryption Test

A submitted hard disk encryption application is checked against a fresh install of an operating system. The following tests will be performed:

• Encryption: The hard disk encryption application should be able to encrypt one or more of the following:

  • Files
  • Folders
  • Disks

The information should not be accessible without a valid key.

Decryption: The hard disk encryption application should be able to decrypt one or more of the following:

• Files
• Folders
• Disks

User should be able to access the information without any data loss or corruption.